Page 1 of 2 12 LastLast
Results 1 to 20 of 21

Thread: File Upload Security Testing

  1. November 14th, 2011 #1
    SmilingDevil
    SmilingDevil is offline
    n00b
    Join Date
    Nov 2011
    Posts
    10
    Points
    242
    Level
    2
    Points: 242, Level: 2
    Level completed: 92%, Points required for next Level: 8
    Overall activity: 22.0%
    Rep Power
    0

    File Upload Security Testing

    Hey guys, this is my first post.

    Anyways, I created this site as a project in PHP. I would like to get some security testing done on it for anyone that knows how to do that.

    Sample account -
    username: 1337
    password: 1337

    MySQL injection, XSS, do everything you can. And yes, I am the owner of the site.

    site: here

    Thanks,
    SmilingDevil

    EDIT: Also, don't fuck it up.
    Reply With Quote Reply With Quote
  2. November 14th, 2011 #2
    MaudKip
    MaudKip is offline
    OTC Awards:
    Discussion Ender
    Member of the Month 1337 Posts Medal
    MaudKip's Avatar
    Join Date
    Oct 2006
    Location
    My name is Lazz and I like to political.
    Age
    22
    Posts
    13,699
    Points
    90,273
    Level
    73
    Points: 90,273, Level: 73
    Level completed: 21%, Points required for next Level: 1,977
    Overall activity: 99.9%
    Rep Power
    368

    Re: File Upload Security Testing

    I met this guy in IRC. He has been trying to teach me java, and in the process I realized that I fucking hate OpenSUSE.


    Spoiler: show



    Kage for Admin '09, '10, and forever! Bring back the furry love!


    Quote Originally Posted by runestone View Post
    Maud: Mom, I accidentally shot someone in the head while stoned.
    Mom: (Stops mixing cookie dough and puts hands on hips) Oh, Maudie-plop! Whatever shall we do with you?
    Maud: (Looks down at floor and shuffles feet nervously) IDK, just kill me I guess.
    Mom: (Attempts to brush Maud's hair with her hands) Listen, I want that long face gone, Mister. You know the drill.
    Maud: Yes mom. I'll get the handsaw and tomahawk from the shed.
    Mom: Don't forget to set the woodchipper up in the back yard. Is the body already in the bathtub?
    Maud: Not yet, still in the trunk. I used that plastic wrap to minimise forensics like you taught me.
    Mom: Good boy. Anyway, who'd you finish off this time?
    Maud: Steve.
    Mom: Not that Steve from down at the hardware store...
    Maud: No, not THAT Steve. You know, that cop Steve who's always taking our pot and smoking it himself.
    Mom: Well I'll be! You've sure got us in a pickle this time!
    Maud: I got his gun, cuffs and radio and threw them off the bridge on the way home. Fingers are removed but the teeth are still in there.
    Mom: Well that's a start, I guess. Now get out to that shed - there's work to be done! Here - take a cookie. I've made a little monkey face out of M&M's just the way you like it.
    Maud: Can I have a Dr. Pepper, too?
    Mom: Don't push it.

    Reply With Quote Reply With Quote
  3. November 14th, 2011 #3
    SmilingDevil
    SmilingDevil is offline
    n00b
    Join Date
    Nov 2011
    Posts
    10
    Points
    242
    Level
    2
    Points: 242, Level: 2
    Level completed: 92%, Points required for next Level: 8
    Overall activity: 22.0%
    Rep Power
    0

    Re: File Upload Security Testing

    Quote Originally Posted by MaudKip View Post
    I met this guy in IRC. He has been trying to teach me java, and in the process I realized that I fucking hate OpenSUSE.
    I don't really see how OpenSUSE is a good distro for a desktop. Have you tried Debian, it's like Ubuntu without all the fuck-ups.
    Reply With Quote Reply With Quote
  4. November 14th, 2011 #4
    MaudKip
    MaudKip is offline
    OTC Awards:
    Discussion Ender
    Member of the Month 1337 Posts Medal
    MaudKip's Avatar
    Join Date
    Oct 2006
    Location
    My name is Lazz and I like to political.
    Age
    22
    Posts
    13,699
    Points
    90,273
    Level
    73
    Points: 90,273, Level: 73
    Level completed: 21%, Points required for next Level: 1,977
    Overall activity: 99.9%
    Rep Power
    368

    Re: File Upload Security Testing

    I have a laptop. I was JUST looking into Debian a few minutes ago.


    Spoiler: show



    Kage for Admin '09, '10, and forever! Bring back the furry love!


    Quote Originally Posted by runestone View Post
    Maud: Mom, I accidentally shot someone in the head while stoned.
    Mom: (Stops mixing cookie dough and puts hands on hips) Oh, Maudie-plop! Whatever shall we do with you?
    Maud: (Looks down at floor and shuffles feet nervously) IDK, just kill me I guess.
    Mom: (Attempts to brush Maud's hair with her hands) Listen, I want that long face gone, Mister. You know the drill.
    Maud: Yes mom. I'll get the handsaw and tomahawk from the shed.
    Mom: Don't forget to set the woodchipper up in the back yard. Is the body already in the bathtub?
    Maud: Not yet, still in the trunk. I used that plastic wrap to minimise forensics like you taught me.
    Mom: Good boy. Anyway, who'd you finish off this time?
    Maud: Steve.
    Mom: Not that Steve from down at the hardware store...
    Maud: No, not THAT Steve. You know, that cop Steve who's always taking our pot and smoking it himself.
    Mom: Well I'll be! You've sure got us in a pickle this time!
    Maud: I got his gun, cuffs and radio and threw them off the bridge on the way home. Fingers are removed but the teeth are still in there.
    Mom: Well that's a start, I guess. Now get out to that shed - there's work to be done! Here - take a cookie. I've made a little monkey face out of M&M's just the way you like it.
    Maud: Can I have a Dr. Pepper, too?
    Mom: Don't push it.

    Reply With Quote Reply With Quote
  5. November 14th, 2011 #5
    jefftheworld
    jefftheworld is offline
    Yes! You can!
    3R Member 1337 Posts Medal
    jefftheworld's Avatar
    Join Date
    Jul 2008
    Location
    Toronto, Ontario
    Age
    22
    Posts
    5,524
    Points
    57,299
    Level
    58
    Points: 57,299, Level: 58
    Level completed: 48%, Points required for next Level: 1,051
    Overall activity: 7.0%
    Rep Power
    198

    Re: File Upload Security Testing

    Debian is what I told you to get in the first place.
    Reply With Quote Reply With Quote
  6. November 14th, 2011 #6
    MaudKip
    MaudKip is offline
    OTC Awards:
    Discussion Ender
    Member of the Month 1337 Posts Medal
    MaudKip's Avatar
    Join Date
    Oct 2006
    Location
    My name is Lazz and I like to political.
    Age
    22
    Posts
    13,699
    Points
    90,273
    Level
    73
    Points: 90,273, Level: 73
    Level completed: 21%, Points required for next Level: 1,977
    Overall activity: 99.9%
    Rep Power
    368

    Re: File Upload Security Testing

    I know, that is why I knew to look at Debian. I don't have any blank DVD's though so I am sol.


    Spoiler: show



    Kage for Admin '09, '10, and forever! Bring back the furry love!


    Quote Originally Posted by runestone View Post
    Maud: Mom, I accidentally shot someone in the head while stoned.
    Mom: (Stops mixing cookie dough and puts hands on hips) Oh, Maudie-plop! Whatever shall we do with you?
    Maud: (Looks down at floor and shuffles feet nervously) IDK, just kill me I guess.
    Mom: (Attempts to brush Maud's hair with her hands) Listen, I want that long face gone, Mister. You know the drill.
    Maud: Yes mom. I'll get the handsaw and tomahawk from the shed.
    Mom: Don't forget to set the woodchipper up in the back yard. Is the body already in the bathtub?
    Maud: Not yet, still in the trunk. I used that plastic wrap to minimise forensics like you taught me.
    Mom: Good boy. Anyway, who'd you finish off this time?
    Maud: Steve.
    Mom: Not that Steve from down at the hardware store...
    Maud: No, not THAT Steve. You know, that cop Steve who's always taking our pot and smoking it himself.
    Mom: Well I'll be! You've sure got us in a pickle this time!
    Maud: I got his gun, cuffs and radio and threw them off the bridge on the way home. Fingers are removed but the teeth are still in there.
    Mom: Well that's a start, I guess. Now get out to that shed - there's work to be done! Here - take a cookie. I've made a little monkey face out of M&M's just the way you like it.
    Maud: Can I have a Dr. Pepper, too?
    Mom: Don't push it.

    Reply With Quote Reply With Quote
  7. November 14th, 2011 #7
    Waig
    Waig is offline
    Spaced Cowboy
    Runestone Medal of Honour Spring Break 2010 3R Member 1337 Posts Medal Bronze Donator Medal
    Waig's Avatar
    Join Date
    Apr 2009
    Location
    North by Northwest
    Age
    21
    Posts
    6,915
    Points
    112,967
    Level
    81
    Points: 112,967, Level: 81
    Level completed: 78%, Points required for next Level: 683
    Overall activity: 31.0%
    Rep Power
    505

    Re: File Upload Security Testing

    redhat4lyf
    Reply With Quote Reply With Quote
  8. November 14th, 2011 #8
    Diablo
    Diablo is offline
    crabby crab party pooper Awards:
    Most Popular
    Gold Donator Medal Silver Donator Medal Bronze Donator Medal 1337 Posts Medal
    Diablo's Avatar
    Join Date
    Jun 2008
    Location
    Norwalk, CT
    Age
    22
    Posts
    14,177
    Points
    127,871
    Level
    86
    Points: 127,871, Level: 86
    Level completed: 57%, Points required for next Level: 1,379
    Overall activity: 28.0%
    Rep Power
    559

    Re: File Upload Security Testing

    Quote Originally Posted by MaudKip View Post
    I know, that is why I knew to look at Debian. I don't have any blank DVD's though so I am sol.
    Use a USB key. Problem solved.
    Reply With Quote Reply With Quote
  9. November 14th, 2011 #9
    MaudKip
    MaudKip is offline
    OTC Awards:
    Discussion Ender
    Member of the Month 1337 Posts Medal
    MaudKip's Avatar
    Join Date
    Oct 2006
    Location
    My name is Lazz and I like to political.
    Age
    22
    Posts
    13,699
    Points
    90,273
    Level
    73
    Points: 90,273, Level: 73
    Level completed: 21%, Points required for next Level: 1,977
    Overall activity: 99.9%
    Rep Power
    368

    Re: File Upload Security Testing

    Quote Originally Posted by Diablo View Post
    Use a USB key. Problem solved.
    Looking into it now. It isn't very straight forward and I am exhausted at the moment.


    Spoiler: show



    Kage for Admin '09, '10, and forever! Bring back the furry love!


    Quote Originally Posted by runestone View Post
    Maud: Mom, I accidentally shot someone in the head while stoned.
    Mom: (Stops mixing cookie dough and puts hands on hips) Oh, Maudie-plop! Whatever shall we do with you?
    Maud: (Looks down at floor and shuffles feet nervously) IDK, just kill me I guess.
    Mom: (Attempts to brush Maud's hair with her hands) Listen, I want that long face gone, Mister. You know the drill.
    Maud: Yes mom. I'll get the handsaw and tomahawk from the shed.
    Mom: Don't forget to set the woodchipper up in the back yard. Is the body already in the bathtub?
    Maud: Not yet, still in the trunk. I used that plastic wrap to minimise forensics like you taught me.
    Mom: Good boy. Anyway, who'd you finish off this time?
    Maud: Steve.
    Mom: Not that Steve from down at the hardware store...
    Maud: No, not THAT Steve. You know, that cop Steve who's always taking our pot and smoking it himself.
    Mom: Well I'll be! You've sure got us in a pickle this time!
    Maud: I got his gun, cuffs and radio and threw them off the bridge on the way home. Fingers are removed but the teeth are still in there.
    Mom: Well that's a start, I guess. Now get out to that shed - there's work to be done! Here - take a cookie. I've made a little monkey face out of M&M's just the way you like it.
    Maud: Can I have a Dr. Pepper, too?
    Mom: Don't push it.

    Reply With Quote Reply With Quote
  10. November 14th, 2011 #10
    Jaaykidd
    Jaaykidd is offline
    Haterz gunna hatez
    1337 Posts Medal Bronze Donator Medal
    Jaaykidd's Avatar
    Join Date
    Dec 2009
    Location
    Scotland
    Posts
    3,161
    Points
    41,594
    Level
    49
    Points: 41,594, Level: 49
    Level completed: 85%, Points required for next Level: 256
    Overall activity: 25.0%
    Rep Power
    161

    Re: File Upload Security Testing

    Maud likes to take advice from complete strangers and disregard anything trusted well known board vets like to tell him

    Spoiler: show
    It's SHITE being Scottish! We're the lowest of the low. The scum of the fucking Earth! The most wretched, miserable, servile, pathetic trash that was ever shat into civilization. Some hate the English. I don't. They're just wankers. We, on the other hand, are COLONIZED by wankers. Can't even find a decent culture to be colonized BY. We're ruled by effete assholes. It's a SHITE state of affairs to be in, Tommy, and ALL the fresh air in the world won't make any fucking difference!
    Quote Originally Posted by Diablo View Post
    Jaay's Scottish, there's no such thing as an "alcohol abuse problem."
    Reply With Quote Reply With Quote
  11. November 15th, 2011 #11
    MaudKip
    MaudKip is offline
    OTC Awards:
    Discussion Ender
    Member of the Month 1337 Posts Medal
    MaudKip's Avatar
    Join Date
    Oct 2006
    Location
    My name is Lazz and I like to political.
    Age
    22
    Posts
    13,699
    Points
    90,273
    Level
    73
    Points: 90,273, Level: 73
    Level completed: 21%, Points required for next Level: 1,977
    Overall activity: 99.9%
    Rep Power
    368

    Re: File Upload Security Testing

    You mean complete strangers that have a good bit og know how and runs his own servers and web hosting site?


    Spoiler: show



    Kage for Admin '09, '10, and forever! Bring back the furry love!


    Quote Originally Posted by runestone View Post
    Maud: Mom, I accidentally shot someone in the head while stoned.
    Mom: (Stops mixing cookie dough and puts hands on hips) Oh, Maudie-plop! Whatever shall we do with you?
    Maud: (Looks down at floor and shuffles feet nervously) IDK, just kill me I guess.
    Mom: (Attempts to brush Maud's hair with her hands) Listen, I want that long face gone, Mister. You know the drill.
    Maud: Yes mom. I'll get the handsaw and tomahawk from the shed.
    Mom: Don't forget to set the woodchipper up in the back yard. Is the body already in the bathtub?
    Maud: Not yet, still in the trunk. I used that plastic wrap to minimise forensics like you taught me.
    Mom: Good boy. Anyway, who'd you finish off this time?
    Maud: Steve.
    Mom: Not that Steve from down at the hardware store...
    Maud: No, not THAT Steve. You know, that cop Steve who's always taking our pot and smoking it himself.
    Mom: Well I'll be! You've sure got us in a pickle this time!
    Maud: I got his gun, cuffs and radio and threw them off the bridge on the way home. Fingers are removed but the teeth are still in there.
    Mom: Well that's a start, I guess. Now get out to that shed - there's work to be done! Here - take a cookie. I've made a little monkey face out of M&M's just the way you like it.
    Maud: Can I have a Dr. Pepper, too?
    Mom: Don't push it.

    Reply With Quote Reply With Quote
  12. November 15th, 2011 #12
    Jaaykidd
    Jaaykidd is offline
    Haterz gunna hatez
    1337 Posts Medal Bronze Donator Medal
    Jaaykidd's Avatar
    Join Date
    Dec 2009
    Location
    Scotland
    Posts
    3,161
    Points
    41,594
    Level
    49
    Points: 41,594, Level: 49
    Level completed: 85%, Points required for next Level: 256
    Overall activity: 25.0%
    Rep Power
    161

    Re: File Upload Security Testing

    As does JTW. Minus the hosting sites.

    Spoiler: show
    It's SHITE being Scottish! We're the lowest of the low. The scum of the fucking Earth! The most wretched, miserable, servile, pathetic trash that was ever shat into civilization. Some hate the English. I don't. They're just wankers. We, on the other hand, are COLONIZED by wankers. Can't even find a decent culture to be colonized BY. We're ruled by effete assholes. It's a SHITE state of affairs to be in, Tommy, and ALL the fresh air in the world won't make any fucking difference!
    Quote Originally Posted by Diablo View Post
    Jaay's Scottish, there's no such thing as an "alcohol abuse problem."
    Reply With Quote Reply With Quote
  13. November 15th, 2011 #13
    Diablo
    Diablo is offline
    crabby crab party pooper Awards:
    Most Popular
    Gold Donator Medal Silver Donator Medal Bronze Donator Medal 1337 Posts Medal
    Diablo's Avatar
    Join Date
    Jun 2008
    Location
    Norwalk, CT
    Age
    22
    Posts
    14,177
    Points
    127,871
    Level
    86
    Points: 127,871, Level: 86
    Level completed: 57%, Points required for next Level: 1,379
    Overall activity: 28.0%
    Rep Power
    559

    Re: File Upload Security Testing

    Quote Originally Posted by MaudKip View Post
    Looking into it now. It isn't very straight forward and I am exhausted at the moment.
    It's really not. Despite the fact that I don't usually use Linux, I've done this a bunch of times with various distros (Debian and Ubuntu mainly). Just Google "debian usb key" or something like that and you'll find dozens of guides.
    Reply With Quote Reply With Quote
  14. November 15th, 2011 #14
    MaudKip
    MaudKip is offline
    OTC Awards:
    Discussion Ender
    Member of the Month 1337 Posts Medal
    MaudKip's Avatar
    Join Date
    Oct 2006
    Location
    My name is Lazz and I like to political.
    Age
    22
    Posts
    13,699
    Points
    90,273
    Level
    73
    Points: 90,273, Level: 73
    Level completed: 21%, Points required for next Level: 1,977
    Overall activity: 99.9%
    Rep Power
    368

    Re: File Upload Security Testing

    It's a pain in the ass for my level of exhaustion. It is not outside my reach.


    Spoiler: show



    Kage for Admin '09, '10, and forever! Bring back the furry love!


    Quote Originally Posted by runestone View Post
    Maud: Mom, I accidentally shot someone in the head while stoned.
    Mom: (Stops mixing cookie dough and puts hands on hips) Oh, Maudie-plop! Whatever shall we do with you?
    Maud: (Looks down at floor and shuffles feet nervously) IDK, just kill me I guess.
    Mom: (Attempts to brush Maud's hair with her hands) Listen, I want that long face gone, Mister. You know the drill.
    Maud: Yes mom. I'll get the handsaw and tomahawk from the shed.
    Mom: Don't forget to set the woodchipper up in the back yard. Is the body already in the bathtub?
    Maud: Not yet, still in the trunk. I used that plastic wrap to minimise forensics like you taught me.
    Mom: Good boy. Anyway, who'd you finish off this time?
    Maud: Steve.
    Mom: Not that Steve from down at the hardware store...
    Maud: No, not THAT Steve. You know, that cop Steve who's always taking our pot and smoking it himself.
    Mom: Well I'll be! You've sure got us in a pickle this time!
    Maud: I got his gun, cuffs and radio and threw them off the bridge on the way home. Fingers are removed but the teeth are still in there.
    Mom: Well that's a start, I guess. Now get out to that shed - there's work to be done! Here - take a cookie. I've made a little monkey face out of M&M's just the way you like it.
    Maud: Can I have a Dr. Pepper, too?
    Mom: Don't push it.

    Reply With Quote Reply With Quote
  15. November 15th, 2011 #15
    SmilingDevil
    SmilingDevil is offline
    n00b
    Join Date
    Nov 2011
    Posts
    10
    Points
    242
    Level
    2
    Points: 242, Level: 2
    Level completed: 92%, Points required for next Level: 8
    Overall activity: 22.0%
    Rep Power
    0

    Re: File Upload Security Testing

    Quote Originally Posted by MaudKip View Post
    It's a pain in the ass for my level of exhaustion. It is not outside my reach.
    Also, we are completely off topic, but I do want to install Debian, I installed Windows 8 to test, and it works nicely (not in a VM). Any others I should try? I'm thinking of ArchBang linux considering they have the much easier install now.
    Reply With Quote Reply With Quote
  16. November 15th, 2011 #16
    runestone
    runestone is offline
    JSR $1337
    1337 KGB Ruby Donator Medal Titanium Donator Medal Platinum Donator Medal Gold Donator Medal Silver Donator Medal Bronze Donator Medal Runestone Medal of Honour 3R Member 1337 Posts Medal
    runestone's Avatar
    Join Date
    Apr 2004
    Location
    $C000-$C2FF
    Posts
    18,667
    Points
    156,917
    Level
    94
    Points: 156,917, Level: 94
    Level completed: 76%, Points required for next Level: 933
    Overall activity: 68.0%
    Rep Power
    50

    Re: File Upload Security Testing

    Since visiting that site my PC is running slow and the light on my network jack is constantly flashing.

    Click here to make a donation to 1337.com and help us pay the bills

    ‘In the end, we have the Gatling gun, and they have not’
    Reply With Quote Reply With Quote
  17. November 15th, 2011 #17
    ryudo
    ryudo is offline
    flying monkeys
    1337 Posts Medal
    ryudo's Avatar
    Join Date
    Nov 2006
    Location
    TRR pls?
    Age
    23
    Posts
    1,550
    Points
    20,921
    Level
    35
    Points: 20,921, Level: 35
    Level completed: 15%, Points required for next Level: 1,029
    Overall activity: 28.0%
    Rep Power
    85

    Re: File Upload Security Testing

    Quote Originally Posted by runestone View Post
    Since visiting that site my PC is running slow and the light on my network jack is constantly flashing.
    sounds like you caught the digital clap. wrap that before you tap that sexy new network. nobody knows how many people have been up in and out of those ports o.O

    "Cowards die many times before their deaths, the Valiant never taste of death but once." -William Shakespere
    Reply With Quote Reply With Quote
  18. November 16th, 2011 #18
    SmilingDevil
    SmilingDevil is offline
    n00b
    Join Date
    Nov 2011
    Posts
    10
    Points
    242
    Level
    2
    Points: 242, Level: 2
    Level completed: 92%, Points required for next Level: 8
    Overall activity: 22.0%
    Rep Power
    0

    Re: File Upload Security Testing

    Quote Originally Posted by runestone View Post
    Since visiting that site my PC is running slow and the light on my network jack is constantly flashing.
    Well, I'm guessing this isn't the most proper way to meet an admin, by making his computer slow.

    It's in my internal network so it might be slow.

    Sorry.
    Reply With Quote Reply With Quote
  19. November 17th, 2011 #19
    Avarik
    Avarik is offline
    <3 Awards:
    Community Award
    Silver Donator Medal 3R Member Runestone Medal of Honour 1337 Posts Medal
    Avarik's Avatar
    Join Date
    Aug 2004
    Location
    California
    Posts
    18,631
    Rep Power
    604

    Re: File Upload Security Testing

    network jack me off
    SPENCER ♥ MANNING
    Reply With Quote Reply With Quote
  20. January 12th, 2012 #20
    gor00
    gor00 is offline
    ub3r n00b
    Join Date
    Jan 2012
    Posts
    1
    Points
    12
    Level
    1
    Points: 12, Level: 1
    Level completed: 23%, Points required for next Level: 38
    Overall activity: 0%
    Rep Power
    0

    Re: File Upload Security Testing

    you can take a tour on owasp ( www.owasp.org ) there is a lot of tools and advices to test your web application security.
    Have fun ;-)
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules